There is no recovery
Your Admin Key is the SSH keypair bound to your Site. It's the only thing that authorizes deploying, fetching, or deleting it — there's no account behind it, no password, and no "forgot your key" flow. If you lose it, your Site is orphaned: still live, still serving whatever was last pushed, but unreachable by you forever. Nothing deletes an orphaned Site automatically, and nothing recovers it either.
The server never sees your private key
Every creation path is bring-your-own-key. You generate the keypair
(ssh-keygen), and only the public half is ever sent
anywhere. The server stores the public key and nothing else — it
doesn't generate keys for you, doesn't transmit private key material, and
has no ceremony where a private key is shown once and then discarded. The
private key never leaves your machine unless you copy it there yourself.
Back it up like you mean it
Copy your private key file somewhere durable — a password manager that stores files, an encrypted backup, a second machine. Treat losing it the same way you'd treat losing the only copy of a domain's registrar login: recoverable only if you planned ahead.
No rotation, yet
If your key is compromised, there's currently no way to swap it out from under an existing Site. The remedy today is the same as losing it: create a new Site with a new key, and treat the old one as gone.
Contact Email is not a backup
You can optionally attach a Contact Email to your Site. It's a notification channel only — it can't recover a lost key, log you in, or prove ownership of anything. If your key is gone, an email address on file changes nothing.